Expand description
Authenticated issuance and evaluation-window facts, not AC authorization.
RFC5755 §5 separates signature/purpose/time from holder authentication, certification paths, direct AA trust and targeting. The latter obligations, proxy effects and revocation remain with the caller. A successfully parsed critical extension is not an enforced effect. Returned profile facts retain these obligations rather than silently satisfying them. https://www.rfc-editor.org/rfc/rfc5755.html#section-5
Structs§
- Authenticated
- Original authenticated issuance facts with independently owned profile storage.
- Rejection
- A refusal and an honest original enclosure, not an invented field range.
Enums§
- Authentication
Error - Original shared processing failure or selected-provider failure.
- Failure
- Completed semantic refusal, never a resource or callback error.
- Outcome
- Completed operation, with unsupported capability separate from rejection.
- Stage
- Callback capability or source of a provider failure.
Traits§
- Algorithm
Agreement - Semantic agreement supplied by the same selected signature verifier.